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The following is a computer uncertified rough Page 1 of 14 

draft transcript of the deposition of DAVID GARZA taken 
on April 26, 2023. 
This uncertified rough draft transcript cannot 
be quoted in any pleading, motion, hearing, trial, or 
for any other purpose and may not be filed with any 
court. All parties receiving this uncertified rough 
draft transcript agree that it will not be shared, 
given, copied, scanned, faxed, or in any way distributed 
in any form to anyone except their own experts or staff, 
and agree to destroy this rough draft in any form and 
replace it with the final certified transcript once it 
is completed. 
There may be discrepancies when comparing this 
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uncertified rough draft transcript with the final 
transcript, and the rough draft transcript may contain 
untranslated steno, incorrect punctuation, incorrect 
spelling, an occasional court reporter's note, and/or 
nonsensical English word combinations. This rough draft 

20 transcript does not include any title, appearance, 

21 index, or reporter certification pages. Exhibits are 

22 not attached. 

23 Thank you! 

24 
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THE VIDEOGRAPHER: Good morning. We are going on 
the record at 10:01 a.m. on April 26th, 2023. 

Please note the microphones are sensitive and 
may pick up whispering and private conversations. 
Please mute your phones at this time. 

Audio and video recording will continue to 
take place unless all parties agree to go off the record 

This is media unit 1 of the video-recorded 
deposition of Dave Garza taken in the matter of Ecolab, 
et al. versus Anthony Ridley, et al. 

The location of this deposition is being taken 
at the Renaissance Chicago O'Hare located at 8500 West 
Bryn Mawr Avenue, Chicago, Illinois. 

My name is Nick Page, representing Veritext, 
I'm the videographer. The court reporter is Nadine 
Watts, also from the firm Veritext. 

I'm not related to any parties in this action, 
nor am I financially interested in the outcome. 

If there are any objections to the 
proceedings, place state them at the time of your 
appearance. 

Counsel and all present, including remotely, 
will now state their appearances and affiliations for 
the record, beginning with the noticing attorney. 
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MS. LUND: This is Juli Ann Lund from Williams & 
Connolly on behalf of the defendant ChemTreat 
Incorporated, and with me is my colleague Mark Lyon. 
MR. POPE: Lance Pope from Patrick Beard Schulman & 
Jacoway attending remotely on behalf of defendant 
Anthony Ridley. 
MR. WINSMAN: And this is Edward Winsman from the 
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14 Q So if there's a Digital Guardian report that has 

15 data for 62 days, how would that be possible? Page 2 of 14 
16 A How do you mean? 

17 Q Well, if the retention period of data in Digital 

18 Guardian is only 60 days at the time we're talking about 

19 in July of 2021, how could a Digital Guardian report 

20 created in July of 2021 have 62 days worth of data? 

21 A The only way that could probably be is if they 

22 were to b they would pull data that may reside still 

23 within Digital Guardian logs. You know, outside -- I 


24 don't know how the data would come from that, from 62 
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days. It would have to be the back end system. It 
would have to be within Digital Guardian where they -- 
they would have had to do some more digging. I'm not 
sure how that would be for 62 days. 
Q Because 62 days is not a standard period, right? 
MR. WINSMAN: Objection to form, outside the scope, 
misstates testimony. 
THE WITNESS: We primarily focus on -- you know, 
that's what I've been told, is 60 days. 
MS. LUND: Q Is there any documentation that would 
reflect what the retention period was for Digital 
Guardian data in July of 2021? 
A There are knowledge based articles that have 
been created for support teams that document the 60 
days. 
Q And where are those articles located? 
A Those articles are located on service now 
support tool. That's our help desk tool. 
MS. LUND: Is that the document you were required to 


PRPRPRPPRPRPRPREPB 
ODIDUBWNHHRDOODNDOBWNHE 


20 produce by April 19th that you haven't produced yet, the 
21 policy that was identified as a reference in the policy 
22 Ms. Semmler created? 
23 MR. WINSMAN: Well, this is Mr. -- the deposition of 
24 the 30(b) (6) witness. 
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MS. LUND: Q All right. I will just make a 
request on the record that we received this knowledge 
based article which I believe is the same document that 
the court ordered plaintiffs to produce as of April 19th 
and which we have not yet received. 

So Mr. Garza, your testimony is that there are 

articles on service now, which that's an online 
resource, correct? 

A That's correct. 

Q That would document what the retention period 
was for the Digital Guardian data in July of 2021? 

MR. WINSMAN: Objection to form, misstates 
testimony. 

THE WITNESS: Those documents would instruct our 
analysts on what's available to them. 

MS. LUND: Q And did you review those documents in 
preparation for your testimony today? 

A I did not. 

Q Did you speak to Ms. Semmler about what the data 
retention period is for Digital Guardian? 
21 A We did cover that. 
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8 all started with the normal manager request to get 

9 access to a terminated employee's data. Page 3 of 14 
10 MS. LUND: Q So what manager made a request for 

11 access to Mr. Ridley's data? 

12 A I believe it was Ms. Mahre. 

13 @) Ms. Mahre is a human resource manager, correct? 

14 A That's correct. 

15 Q Was Ms. Mahre Mr. Ridley's supervisor? 

16 A Not that I know of, but it's not uncommon for HR 

17 to make the request. 

18 Q So why did Ms. Mahre make a request to get 

19 access to Mr. Ridley's data? 
20 MR. WINSMAN: Objection, outside the scope. 
21 THE WITNESS: Other than just normal course of you 
22 know terminated employee and requesting access to their 
23 data, I'm not aware of a specific reason other than the 
24 employee was gone and that's part of the process. 

ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 76 


MS. LUND: Q So is it your testimony that HR 
routinely requests access to employees data when they're 
terminated or when they leave the company? 
MR. WINSMAN: Objection to form, misstates 
testimony. 
THE WITNESS: I couldn't say it's routine, but it's 
not unheard of for that to be a request made by HR. 
MS. LUND: Q So, Mr. Garza, you understand that 
you are here today testifying on behalf of Ecolab, 
correct? 
A That's correct. 
Q And you understand that your role is to give me 
all of the information that Ecolab has about the topics 
that you've been designated for, correct? 
A That's correct. 
Q And you understand that Ms. Mahre is an he can 
employee, correct? 
A I do understand that. 
Q And you understand that Ms. Corona is an Ecolab 
employee? 
A That's correct. 
Q So the actions they took and the reasons they 
took those actions are information that Ecolab has and 
that Ecolab could give me, correct? 
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MR. WINSMAN: Objection. Mr. Garza has been 
designated for specific topics, including, and we're 
talking about topic number 6 right now, information 
regarding Ridley's alleged misappropriation. 

MS. LUND: Yes, and you will see 6A, the dates on 
which you received information regarding Ridley's 
alleged misappropriation, including any information that 
led to Theresa Corona's request for review of Ridley's 
systems. 


We've already established that that request 
for review of Ridley's systems occurred on or before 
July 18th, 2021. And so I am now attempting to learn 
what information it was that led to Theresa Corona's 
request for review of Ridley's systems. And I believe 
15 Mr. Garza's testimony is that he does not know. 

Mr 
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17 A I'm not aware of the details as to why the 
18 request is made other than a terminated -- other than Page 4 of 14 
19 that being part of the termination process. 
20 Q Okay. Do you know when Ms. Corona made the 
21 request to Ms. Mahre? 
22 A I am not aware of the exact date that happened. 
23 Q Do you know how she made that request? 
24 A I was not involved in the request. So I'm not 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 78 
sure. 
Q So you don't know whether that was made orally 


or in writing? 

A I am not. 

Q Did Ecolab learn new information after July lst 
that led Ms. Corona to request the review? 

MR. WINSMAN: Objection to form, vague. 

THE WITNESS: T'm not -- 

MR. WINSMAN: Mr. Garza can't testify as to what was 
in the mind of counsel for Ecolab. 

MS. LUND: I'm not asking Mr. Garza what was in the 
mind of counsel. I'm asking what information Ecolab 
obtained that led to the request. 

Did Ecolab learn new information after July 1st 
that led Ms. Corona to request the review? 

A If -- nothing like that was shared with myself. 
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Q Okay. So you don't know what information Ecolab 
might have learned between July 1st and July 18th, 2021? 
MR. WINSMAN: Objection to form, misstates 
20 testimony. 
21 THE WITNESS: Yes, our role is to ensure the proper 
22 parties have the right to make these requests and 
23 fulfill them, so. 
24 MS. LUND: Q And I understand that that's your 
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role individually, Mr. Garza. I'm asking you these 
questions as a representative of Ecolab and I understand 
it may not be within your personal knowledge. 

So I'm asking you as a representative of 
Ecolab, do you know what information, if any, Ecolab 
learned after July list, 2021 that led Ms. Corona to 
request a review of Mr. Ridley's digital activity? 

MR. WINSMAN: Objection to form, vague, asked and 
answered. Begin, the witness can't testify as to what 
was in the mind of Ecolab's counsel. 

THE WITNESS: I'm not aware. 

MS. LUND: Q And you do not know how he can 
learned any information after July 1st, 2021 before July 
18th, 2021 that would have raised created a basis to 
request a review for a review of Mr. Ridley's digital 
activity? 

A Activities of -- 
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MR. WINSMAN: Objection, vague, asked and answered. 
THE WITNESS: Activities and discussions prior to 
20 July 18th, I would not be aware of. 
21 MS. LUND: 0 And so you don't know from whom it 
22 learned any information it may have learned after July 
23 lst that would lead to a request for review of 
24 Mr. Ridley's digital activity? 
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6 look at Exhibit 23, you'll see that Ms. Semmler 


7 indicates that this report, along with the underlying Page 5 of 14 
8 reports, including the Digital Guardian report, were all 
9 stored in a OneDrive folder that she maintained, 
10 correct? 
11 A Yes. Sorry, yes. 
12 Q Yes. So was that OneDrive folder of 
13 Ms. Semmler's put on legal hold in -- sorry, in July of 
14 2021? 
15 A I'm not aware of a legal hold being put on our 
16 collection of -- this repository that you speak of the, 
17 of the OneDrive, no. 
18 Q So as far as you know there has never been a 


19 legal hold put on the folder where Ms. Semmler stored 
20 the Digital Guardian report that she ran on July 23rd of 


21 "2021? 
22 A I'm not aware of a legal hold being put on 
23 there. 
24 Q If I can direct your attention to page 2 of 
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Exhibit 23, you'll see in the bottom half there's a 
title that says DLP files transfer data. 

A I do. 

Q It says DLP activity for Mr. Ridley can be 
reviewed accessing the link at the end of this report. 
The data export dash 2021 dash 07 dash 23 dash 11 
underscore 24 underscore 30 report contains a large 
amount of data. Do you see that language? 
A I do. 
Q And do you understand that that is the name of 
the Digital Guardian report that Ms. Semmler prepared on 
July 23rd, 2021? 
A The data export, yes, I do know. I see that. 
Q Do you know why the version of the Digital 
Guardian report that Ecolab produced in this litigation 
has a different file name than the original Digital 
Guardian report listed in Ms. Semmler's employ data 
review for Mr. Ridley as reflected in Exhibit 23? 

A I'm not aware of the naming convention that she 
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20 used, why there would be a difference. 
21 Q What did Ecolab do to forensically preserve the 
22 original Digital Guardian report? 
23 A I think other than you know store it into 
24 OneDrive with limited access, I don't think anything 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 91 
1 more than that. Again, that report can be generated at 
2 any time too. Well, sorry, you're right. There was 
3 nothing put onto that at the time. 
4 Q And when you say limited access, what do you 
5 mean? 
6 A Within -- as part of any investigation, only you 
7 know the analyst and perhaps legal or HR would have 
8 access to those. 
9 Q Would anyone who received the report at Exhibit 
10 23 have access through the link to the information in 
11 that file? 
12 A If it was shared with them, they would have 
13 access to it. 
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24 reviewed those documents at that time, if they were 
Page 6 of 14 
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available. 

MS. LUND: Q Do you know whether Ecolab attempted 
to locate the documents listed on the Digital Guardian 
report in July of 2021? 

A I know as part of that request there was -- 
that's where the review of the OneDrive -- Mr. Ridley's 
OneDrive account came into play and upon review of the 
OneDrive, whatever was there -- whatever was available 
in OneDrive was produced -- was provided for review for 
legal and HR. 

Q So who in July of 2021 reviewed Mr. Ridley's 


OneDrive? 
A At that time I believe Theresa Corona and 
perhaps Ms. Mahre from HR. But I do know Theresa Corona 


was involved in that review. 

Q And before these individuals began accessing 
Mr. Ridley's OneDrive, what steps, if any, were taken to 
forensically preserve it? 
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A The forensic preservation of that file -- well, 
20 I guess there's two pieces. Once it was identified in 
21 OneDrive, it was not -- it was moved out -- it wasn't -- 
22 it was held so it wouldn't be deleted my understanding. 
23 That's how we preserved it, not being on legal hold. 
24 But we did not have it set to be part of that 
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termination process. So the OneDrive was then preserved 
at that time, not on legal hold, but it was available 
for review. And that was in July, September timefram 

Q Well, those are very different timeframes, 
antithey, July of 2021 and September of 2021? 

A I don't -- I mean, there are two different 
months, sure, I guess if you want to say that. 

Q Right, they're at least 60 days a part? 

A Not necessarily, not if you're talking about the 
middle of July timeframe. 

Q Okay. Well, when specifically was the OneDrive 
taken out of the deletion queue? 

A In July of '21 as part of the access request. 

@) Which access request? 

A From HR as far as -- it all kind of -- you have 
to understand it all flows together with an access 
request is made. 

Q So is it your testimony that when Ms. Mahre 
submitted a request to Ms. Semmler to do the employee 
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20 data review, that at that time Mr. Ridley's OneDrive was 
21 segregated in some way? 
22 A It was not set to be deleted. 
23 Q And who else had access to Mr. Ridley's OneDrive 

24 in July of 2021? 

ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 96 

1 A At that time I believe Theresa Corona was the 

2 primary person with access. 

3 Q And do you know whether Mr. Ridley's former 
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5 of 2021? 


6 A I am not aware of them having access -- her Page 7 of 14 
7 having access. 
8 Q So is it your testimony that every time an 
9 employee data review is requested, that that employee's 
10 OneDrive is taken out of the deletion queue? 
11 MR. WINSMAN: Objection to form, misstates 
12 testimony. Go ahead. 
13 THE WITNESS: For that period of time to give the 
14 manager or HR or legal time to review it. So that's 
15 that 30 day window as part of that termination process. 
16 MS. LUND: Q So what you're saying is not that 
17 anything different was done with regard to Mr. Ridley's 
18 OneDrive because of this employee data review, request, 
19 but simply that the request occurred during the ordinary 
20 30 day window for review? 
ZA. A That is my understanding, yes. 
22 Q And at the end of that 30 day window was 
23 Mr. Ridley OneDrive put into the deletion queue? 
24 A As part of that review, IT security was asked to 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 97 


ensure that it was not deleted. 

Q And when was that request made to IT security? 

A I believe that is at the end of July. 

Q How is that request made? 

A I'm not aware of exactly how that request was 
made, but we were told to make sure it was protected. 

Q And who told you that? 

A That was coming from Theresa Corona. 

Q And what steps were taken to ensure that the 
OneDrive was protected? 

A I'm not 100 percent on all technical aspects of 
it, but it was not marked for deletion or as far as that 
user -- that OneDrive was not part of the termination 
process to delete the files in the regular scheduled 
timeframe. So I'm not sure what the technical 
configuration is to mark it that way. 

Q So other than not moving Mr. Ridley's OneDrive 
into the deletion queue, what steps, if any, were taken 
to preserve that data? 
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20 MR. WINSMAN: Objection to form, vague. 
21 THE WITNESS: Other than assurance not to delete it, 
22 I'm not aware of any other controls. 
23 MS. LUND: Q What steps were taken to recover any 
24 documents that were in the recycle bin for Mr. Ridley's 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 98 

1 OneDrive? 

2 A As part of the review, we had some share -- 

3 there was a technical session where the review was done 
4 and ensured that all the data that was in there, whether 
5 it was recycled or active, was saved. 

6 Q And when was that technical session? 

7 A I believe that was again as part of the access 

8 request, which would have been in July as far as 

9 granting access to legal and HR for review. 

10 Q And who was involved in that technical session? 
11 A There was Toua Vue that I had mentioned earlier, 
12 myself and Jack Anderson and -- Yes, that's it. 
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14 A I think the only thing would have been maybe a 
15 calendar invite. Page 8 of 14 
16 Q And so it's your testimony that at some point in 
17 July of 2021 you and other individuals with whom you 
18 work had a technical session in which you looked at the 
19 recycle bin for Mr. Ridley's OneDrive, is that correct? 
20 A At that time, yes, we reviewed the OneDriv 
21 account. 
22 Q And what was in the recycle bin? 
23 MR. WINSMAN: Objection to form, vague. 
24 THE WITNESS: I don't -- I don't recall exactly 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 99 
what -- what was in there for what was recovered. But 
what we -- yes, I'm not 100 percent. 


MS. LUND: Q But it's your testimony that in July 
of 2021 you recovered whatever was in Mr. Ridley's 
recycle bin at that time, correct? 

A Whatever was part of Mr. Ridley's OneDrive was 
recovered. 

Q And that would include anything that he had 
deleted within the last 93 days, correct? 

A Based on Microsoft's policy, yes. 

MS. LUND: We've been going about an hour. So why 
don't we go ahead and take a break for lunch. 

MR. WINSMAN: Okay. 
THE VIDEOGRAPHER: Off the record at 12:16. 
(Lunch recess was taken.) 

THE VIDEOGRAPHER: Back on the record at 1:15. 

MS. LUND: 9Q So, Mr. Garza, before we broke for 
lunch we were talking about what Ecolab did in July of 
2021 to investigate Mr. Ridley's alleged 
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20 misappropriation of Ecolab's documents. 

21 Is there anything else that Ecolab did in July 
22 of 2021 that we haven't already discussed? 

23 MR. WINSMAN: Just objection in terms of privilege 
24 to the extent that this is something that involved 
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communications with counsel or things done at the 
instruction of counsel I'd instruct you not to answer. 

THE WITNESS: Nothing else was done at that time. 

MS. LUND: Q What did Ecolab do in August of 2021 

to investigate Mr. Ridley's alleged misappropriation of 
Ecolab's documents? 

MR. WINSMAN: I'd make the same instruction and 
objection. 

THE WITNESS: I'm not aware of anything -- anything 
additional was going on at that time. 

MS. LUND: Q What steps did Ecolab take in August 
2021 to preserve Mr. Ridley's data? 

A The only thing I'm aware of is that once access 
was granted to -- once OneDrive was identified, Ridley's 
OneDrive was identified and granted access to legal, we 
were asked not to delete it and nothing else was done at 
that time. 

Q What steps did Ecolab take in August 2021 to 
preserve Mr. Ridley's devices? 

A In August '21 I'm not aware of anything else. 
At that time his device had already been -- I believe 
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21 MR. WINSMAN: Objection. 
22 THE WITNESS: It seems they were reviewing it at Page 9 of 14 
23 this point. 
24 MS. LUND: Q And if you look at the e-mail chain, 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 115 


Mr. Lammana doesn't write and say I already looked into 
this in July of '21, does he? 

A Not on this e-mail chain. 

Q And would you expect him to have raised that 
issue if he had looked for it at the time? 

MR. WINSMAN: Objection to form, calls for 
speculation. 
THE WITNESS: Yes, he could have replied to the 
e-mail or had a conversation with Janice. But, yes, 

it's not on here. 

MS. LUND: Q And if Mr. Lammana had looked into 
the issue in July of 2021 and confirmed that just days 
after Ms. Ridley returned his mobile drive insight was 
unable to find it, would legal need to be asking about 
that issue months later in January of 2022? 

MR. WINSMAN: Objection to form, calls for 
speculation. 
THE WITNESS: Probably not. 

MS. LUND: Q Okay. And then if you can -- if I 
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20 can direct your attention to the first page, on the 

21 middle of the page you will see there's a second e-mail 
22 down a January 19th, 2022 e-mail from Ms. Coulter to the 
23 same group of individuals. She writes, morning all, 

24 someone from legal just reached out asking about the 
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hard drive again. Did we find it or are we still 
looking for it. Do you see that? 


A I do see that. 

Q And does that indicate to you that at least as 
of January 19th, 2022 legal did not know the status of 
that mobile drive? 

A They sent this e-mail. It seemed they wer 
still looking for it. 

Q Do you know why they didn't look for it before 
January of 2022? 

MR. WINSMAN: Objection to form, assumes facts not 
in evidence. 

THE WITNESS: I have no idea. 

MS. LUND: Q Are you aware of any evidence that 
legal did look for this mobile drive before January of 
2022? 

A The primary interactions with legal was around 
OneDrive and the data. 

Q Are you aware of any effort by Ecolab to reach 
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20 out to insight at any time before January 2022 to locate 
21 the mobile drive that was returned by Mr. Ridley? 

22 A I don't have any communications prior to that. 
23 Q Is that something that you have looked for? 

24 A It was not brought to my attention in 
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tion 
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2 Q Do you know whether that's something that Ecolab 
3 has looked for? Page 10 of 14 
4 A I have not seen any communications around that. 
5 I'm not sure. 
6 
dL 
8 


Q But there are a number of Ecolab employees 
copied on these e-mail chains, correct? 


A On this exhibit, yes. 

9 Q Okay. On -- 
10 A 109. 
11 Q On Exhibit 108 and 109, both have multiple 
de? Ecolab employees copied, correct? 
13 A They're Ecolab. It's on both of those, yes. 
14 Q And you previously testified that the Veritas 
15 system keeps a copy of every e-mail that is sent or 
16 received by an Ecolab employee back through 2011, 
Lf correct? 
18 A Veritas has been in place since then, yes. 
19 Q So if there were communications between any 
20 Ecolab employee and an insight employee regarding 
21 Mr. Ridley's mobile drive or other devices that he had 
22 returned, those would be locatable by Ecolab, correct? 
23 A All those communications would be in an archive, 
24 in Ecolab's archive. 
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Q And that archive is searchable? 

A It is searchable. 

Q So in September of 2021 Ecolab's inhouse legal 
department still had access to Mr. Ridley's OneDrive, 


correct? 
A They still had access to the OneDrive, yes. 
Q What restrictions, if any, were on -- were in 


place with regard to that access to prevent data from 
being altered by that access? 

A I'm not aware of any special actions taken. 

Q Did Ecolab take any steps in September of 2021 
to locate the documents that are identified on the 
Digital Guardian report as having been copied or 
transferred by Mr. Ridley? 

A I'm not aware of any activity like that. 

Q Did Ecolab take any steps in September 2021 to 
preserve the documents or data of other custodians who 
would have information relevant to the alleged 
misappropriation by Mr. Ridley? 


PRPRPPPRPRPRPEPB 
ODIDUBWNHRFRDOODINDOBWNHE 


20 A I'm not aware of any other custodians or 
21 requests. 
22 Q And Ecolab did not contact Mr. Ridley in 
23 September 2021 regarding the alleged misappropriation? 
24 A I would not have been involved in any 
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1 communication with Mr. Ridley at that time. 
2 Q And you don't know whether Ecolab had any such 
3 communications? 
4 A No one explained to us that there was 
5 communication going on. 
6 Q And you don't nope why Ecolab made the decision 
7 not to reach out to Mr. Ridley to find out his 
8 explanation for the information that was shown on the 
9 Digital Guardian report? 


no_information to 
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10 2021 about the alleged misappropriation, correct? 


TA. A Not that I'm aware of. Page 11 of 14 
i ee Q And Ecolab did not contact ChemTreat in December 

13 2021 about Mr. Ridley's alleged misappropriation, 

14 correct? 

15 A Correct. 

16 Q Is there anything else that Ecolab did in 


17 December 2021 to investigate Mr. Ridley's alleged 


18 misappropriation of Ecolab's documents that we haven't 

19 already discussed? 

20 MR. WINSMAN: Objection, vague. Privilege 

21 instruction for the witness. 

22 THE WITNESS: Nothing more than we've already 

23 discussed. 

24 MS. LUND: Q And are you aware as the corporate 
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representative of Ecolab of any communications that 
Ecolab's inhouse counsel had with any employees of 
Ecolab in connection with the investigation into 
Mr. Ridley's alleged misappropriation of Ecolab's 
documents that occurred in December of 2021? 

A I'm not aware of any communications. 

Q What did Ecolab do in January 2022 to 
investigate Mr. Ridley's alleged misappropriation of 
Ecolab's documents? 

MR. WINSMAN: Objection, vague, privileged, and 
instruct the witness not to reveal privileged 
communications. 

THE WITNESS: I believe in January was when we first 
began working with Mr. Lieb, Larry Lieb, and to get him 
access into OneDrive. And at that time that's when he 
was going to take the forensic image for his own review. 
And I believe at that time, in January, I believe it was 
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like January 25th when was the legal hold was put on 

Mr. Ridley's -- was created. 
20 MS. LUND: Q So Mr. Ridley resigned from Ecolab on 
21 July lst, 2021 and at the time informed Ecolab that he 
22 was going to work for a competitor, ChemTreat, correct? 
23 A That's correct. 
24 Q And on July 18th, 2021 Theresa Corona, Ecolab's 
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inhouse counsel -- well, I guess I should say on or 
before July 18th, 2021, Theresa Corona, Ecolab's inhouse 
counsel, requested that Kristin Mahre request an 
employee data review of Mr. Ridley's digital activity, 
correct? 

A That's correct. 

Q And Ms. Mahre made that request on July 18th of 
2021, correct? 

A Correct. 

Q And on July 23rd, 2021 Ms. Semmler transmitted 
the results of that review of Mr. Ridley's digital 
activity, including the Digital Guardian report, 
correct? 

A That would have been the Digital Guardian 
report, yes. 

Q And that report went to Kristin Mahre and 
leh Theresa Corona, correct? 

nderstanding 
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7 A Uh-huh, yes. 

8 Q And can you explain again what the operation Page 12 of 14 
9 type shows? 

10 A Yes, that would show the action that was taken 

11 for the file. So file copy means to take a copy from -- 

12 you know from one destination, make a copy -- from one 

13 source and make a copy to another destination. 

14 Q And you'll see that here all of the operation 


15 types that show up in Mr. Ridley's Digital Guardian 


16 report have been expanded. Do you see that? 
17 A Uh-huh. I do. 
18 Q And can you confirm that delete does not appear 
19 among the operation type? 
20 A I can. 
21 Q Okay. And that's something where if deletion 
22 had occurred, that would show, correct? 
23 MR. WINSMAN: Objection, misstates testimony. 
24 THE WITNESS: If that action was taken, the 
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operation type is where it would be shown. 
MS. LUND: Q Right. So if any deletion had 
occurred, it would show up in operation type, correct? 


MR. WINSMAN: Objection to form, misstates 
testimony. 
THE WITNESS: If that -- if a deletion occurred, it 


would be in operation type. 

MS. LUND: Q And you'll see one of the types is 
listed as filed moved, correct? 

A That's correct. 

Q So let's go ahead and filter for file moved. 


And let's see you might need to make the screen -- I 
can't see. We should see how many results there are for 
this. 

A There's 1400. 

Q It's not showing up on my screen. That might be 


a problem with me. 
So the total number you said is 1400? 
A One report I had looked at it had that number. 
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20 I don't know. I can't see -- I can't see it here 
21 though. Or is that 1,466? 
22 Q Oh, I see. Can you put the cursor back then? I 
23 don't know if that was you or me. Is there a way to 
24 minimize it on your screen so we can -- all right. Do 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 149 
1 you see that it shows that 1,466 of the 94,489 records 
2 reflect a file move? 
2 A That's correct. 
4 Q Okay. So only those records are the records 
5 that were actually moved from one location to another, 
6 correct? 
7 A That's what the report shows, yes. 
8 Q Okay. So no deletion and 1,466 files out of 
9 94,000 plus were moved? 
10 MR. WINSMAN: Objection, misstates testimony. 
11 THE WITNESS: But in a file move the -- where the 
12 file was moved from, that source would no longer have 
13 the file once it was done. 


14 MS. LUND: Q So 1,466 of the records of 94,000 
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23 A Okay. Okay. 
24 Q So both Exhibit 79 and Exhibit 110 were created Page 13 of 14 
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by jack Anderson, is that correct? 

A Yes, that's correct. 

Q And am I recalling correctly that Mr. Anderson 
works in your department? 

A He does. 

Q Okay. Do you know why Mr. Anderson ran these 
reports? 
A Just assisting legal with the request. 

Q Are these the kinds of reports that your 
department regularly runs? 
A If we're requested for hardware, sure. 


Q If I can direct your attention to Exhibit 110, 
if you could flip to page 4 please. 
A Okay. 


Q You will see at the bottom it reflects that on 
July 12th of 2021 Shreya Patel received at the insight 
depot from Mr. Ridley a laptop with the serial number 5 
CG 84132 TP as well as a USBC doc G4, a 65 watt charger 
and a mobile drive. Do you see that? 
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20 A I do see that. 

21 Q And this is the same information that was 
22 reflected in Exhibits 108 and 109 that we looked at 
23 previously, correct? 

24 A Correct. 
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Q And you will see that those devices were not 
moved to inventory until August 5th of 2021, correct? 
It's the line immediately above. 
The August 6th line there in. 
Yes, you'll see it says -- 
Yes, I see it. Thank you. 
So is it fair to say that if Ecolab had issued a 
legal hold on July 1st, 2021, when Mr. Ridley informed 
Ecolab he was departing to work for ChemTreat, a 
competitor, that this laptop and the additional 
accessories that Mr. Ridley returned on July 12th, 2021 
could have been set aside and preserved? 

MR. WINSMAN: Objection, calls for speculation, 
assumes facts not in evidence. 

THE WITNESS: Yes, if a legal hold would have been 
issued it would have been retained. 

MS. LUND: Q And insight as a matter of course 
preserves all devices it receives for a two week period 
after it receives them, correct? 


CO Pro Pp 
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20 A That's correct. 
21 Q So is it fair to say that if Ecolab had issued a 
22 legal hold on July 18th, 2021 when it requested the 
23 employee data review of Mr. Ridley's data, that the 
24 laptop returned by Mr. Ridley along with the various 
ROUGH DRAFT - ROUGH DRAFT - ROUGH DRAFT 168 
1 accessories he returned, including the mobile drive, 
Z could have been preserved? 
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4 speculation, assumes facts not in evidence. 
5 THE WITNESS: Had a legal hold been in place, then Page 14 of 14 
6 we would have preserved it. 
4 
8 


MS. LUND: Q And is it fair to say that if Ecolab 
had issued a legal hold on July 23rd, 2021 when the 


9 results of Ms. Semmler's employ data review, including 
10 the Digital Guardian report, were issued, that, again, 
11 Mr. Ridley's laptop and the mobile drive that he 
12 returned could have been preserved and the data on them 
13 captured? 

14 MR. WINSMAN: Objection, assumes facts not in 

15 evidence, calls for speculation. 

16 THE WITNESS: Had -- if they had enough time to 

17 identify that and determine that, then yes. 

18 MS. LUND: Q Well, in fact the laptop wasn't moved 
19 into inventory until August 5th of 2021, correct? 

20 A That's what the record shows. That's what this 
21 shows, yes. 

22 Q So there was two weeks after the DLP Digital 

23 Guardian report was prepared when a legal hold could 


24 have been issued and the data on that laptop could have 
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been preserved, correct? 

MR. WINSMAN: Objection to form, calls for 
speculation, assumes facts not in evidence. 

THE WITNESS: If a legal hold would have been 
issued, yes, it could have been retained. 

MS. LUND: 0Q And would you agree that it is more 
likely that the mobile drive returned by Mr. Ridley 
could have been preserved and the data on it reviewed if 
Ecolab had issued a legal hold in July of 2021 rather 
than waiting until January of 2022 to look for that 
device? 

MR. WINSMAN: Objection to form, assumes facts not 
in evidence, calls for speculation. 

THE WITNESS: Yes. Yes, sorry. 

MS. LUND: Why don't we take a short break. 

THE VIDEOGRAPHER: Off the record at 2:56. 

(Recess was taken.) 

THE VIDEOGRAPHER: Back on the record at 3:12. 

MS. LUND: Mr. Garza, I have no further questions at 
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20 this time. I pass the witness. 
21 MR. POPE: Mr. Garza, I don't have any additional 
22 questions for you. 
2:3 MR. WINSMAN: All right. You know what? Can we go 
24 off the record then for another break and come back? 
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1 THE VIDEOGRAPHER: Off the record at 3:12. 

2 (Recess was taken.) 

3 THE VIDEOGRAPHER: Back on the record at 3:23. 

4 MR. WINSMAN: All right. And I have nothing for the 
5 witness. 

6 MS. LUND: Mr. Garza, thank you for your time 

7 witness within thank you. Safe travels. 

8 MR. WINSMAN: Thank you. 

9 THE VIDEOGRAPHER: And we're off the record at 3:23. 
10 

11 
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